$ rpki-client -vvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/B9003CC84EE811EA8C045D52C4F9AE02.roa File: B9003CC84EE811EA8C045D52C4F9AE02.roa (raw, json) Hash identifier: OjXelywDvs3PcA0G5eAXOiCmYLOHa7gJb/8woUyNMgM= Subject key identifier: 2C:8E:D7:F1:01:96:2A:4A:16:E6:C7:A6:AE:EC:58:8E:40:F8:5E:87 Certificate issuer: /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Certificate serial: 0C3B Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/B9003CC84EE811EA8C045D52C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:36:43 +0000 ROA not before: Thu 04 Dec 2025 18:30:13 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 132468 IP address blocks: 103.9.50.0/24 maxlen: 24 103.21.230.0/24 maxlen: 24 103.21.231.0/24 maxlen: 24 103.115.80.0/24 maxlen: 24 103.115.81.0/24 maxlen: 24 2405:c0c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3131 (0xc3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916320B, serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Validity Not Before: Dec 4 18:30:13 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a45d0b-9169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:84:0d:1f:82:84:ca:8a:b8:63:f9:8d:ef:69: a9:92:63:03:cf:ac:87:a2:af:b9:d7:b7:63:0a:08: 1e:69:a2:c4:41:5e:37:43:31:c4:a9:78:a5:97:f8: 16:77:67:2a:1b:d2:78:62:5d:39:3f:2d:04:50:d7: 2d:19:93:62:16:36:d2:f4:73:34:fa:9d:cd:e9:e3: 77:df:74:87:5e:18:78:36:b7:ce:e0:76:28:85:3a: ec:e7:30:b6:1a:87:cf:85:89:f3:59:a1:6a:f9:c1: 8b:84:3a:a0:39:be:8e:7a:ab:16:0e:e5:59:d0:0c: 8e:9b:13:29:b3:51:33:91:05:24:96:1d:77:ba:6b: ec:ed:37:f7:5d:18:20:74:26:63:10:c8:a5:5e:5d: 72:ee:68:13:b4:3e:8f:a1:a2:90:38:44:d8:bd:1d: cb:31:24:bf:98:c6:9f:40:38:31:15:59:1d:f9:9e: 37:69:0f:de:f9:ce:8a:fe:c6:46:32:4c:b0:2d:5d: 8d:01:c9:e3:ee:cf:50:0e:fe:da:99:15:11:68:b8: 0e:e6:dd:eb:98:4e:c4:51:72:15:65:6c:b2:74:b5: ef:a2:cc:72:36:b9:bb:14:89:67:1a:31:c9:75:3f: 5a:42:70:e5:42:9d:36:4d:9c:db:b8:ec:3a:68:5c: cd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8E:D7:F1:01:96:2A:4A:16:E6:C7:A6:AE:EC:58:8E:40:F8:5E:87 X509v3 Authority Key Identifier: keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/B9003CC84EE811EA8C045D52C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.9.50.0/24 103.21.230.0/23 103.115.80.0/23 IPv6: 2405:c0c0::/32 Signature Algorithm: sha256WithRSAEncryption 69:08:4b:de:d6:c9:e9:28:09:5e:c2:a8:1b:57:e2:f0:5e:fc: 47:5e:86:c8:25:77:6c:9b:14:48:14:ab:83:50:d4:c3:e0:b4: 80:e2:e9:bf:1c:05:c2:f0:c0:ab:72:49:56:3c:6d:91:c5:25: 59:09:6a:31:7e:ea:b1:e8:43:a2:4d:cc:ab:90:6e:91:83:40: d1:e2:50:af:71:4d:88:b4:d0:3d:57:02:7d:cb:90:bd:35:e9: f8:0d:50:d0:15:eb:3f:df:3f:70:18:85:63:e0:03:6c:66:87: b6:c9:eb:d4:de:30:f7:c0:52:68:3f:c1:1d:a1:bd:35:c4:a4: 62:f3:56:00:04:dc:2e:98:f3:43:02:03:af:2b:ca:fb:a1:3f: 9b:3a:b6:5e:88:90:2e:d4:ff:99:57:8a:2f:93:0b:60:82:1b: 97:f3:fe:4b:67:82:1b:12:7d:d7:12:b9:7a:5b:03:4d:53:83: 1f:fe:35:2b:00:49:d4:81:4f:df:5c:2e:aa:f1:19:90:98:66: 20:eb:14:25:b0:0e:71:83:79:80:aa:97:3b:f1:32:d1:35:6a: cd:87:a0:df:83:cb:80:66:75:65:ed:c9:87:ff:7c:34:fb:e7: 10:af:be:4b:b5:97:bd:68:97:c4:54:4d:7a:3b:c8:b6:0d:b0: c7:68:6d:7a -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICDDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyMEIxMTAvBgNVBAUTKDcwNDZGODk4M0RGQzM3MDRCNkU1Q0Q3RUExMjgwRkQw RjUyOTc5QTAwHhcNMjUxMjA0MTgzMDEzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWQwYi05MTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+4QNH4KEyoq4Y/mN72mpkmMDz6yHoq+517djCggeaaLEQV43QzHEqXill/gW d2cqG9J4Yl05Py0EUNctGZNiFjbS9HM0+p3N6eN333SHXhh4NrfO4HYohTrs5zC2 GofPhYnzWaFq+cGLhDqgOb6OeqsWDuVZ0AyOmxMps1EzkQUklh13umvs7Tf3XRgg dCZjEMilXl1y7mgTtD6PoaKQOETYvR3LMSS/mMafQDgxFVkd+Z43aQ/e+c6K/sZG MkywLV2NAcnj7s9QDv7amRURaLgO5t3rmE7EUXIVZWyydLXvosxyNrm7FIlnGjHJ dT9aQnDlQp02TZzbuOw6aFzNwwIDAQABo4ICezCCAncwHQYDVR0OBBYEFCyO1/EB lipKFubHpq7sWI5A+F6HMB8GA1UdIwQYMBaAFHBG+Jg9/DcEtuXNfqEoD9D1KXmg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzIwQi8wRkZGN0FBQTI3 QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53UzI1YzEtb1NnUDBQVXBl YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NFYjRtRDM4TndTMjVjMS1vU2dQMFBVcGVhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjMyMEIvMEZGRjdBQUEyN0FFMTFFQTg1OTU2RTc4QzRGOUFFMDIvQjkwMDNDQzg0 RUU4MTFFQThDMDQ1RDUyQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQAZwkyAwQBZxXmAwQBZ3NQMA0EAgACMAcDBQAkBcDAMA0GCSqGSIb3 DQEBCwUAA4IBAQBpCEve1snpKAlewqgbV+LwXvxHXobIJXdsmxRIFKuDUNTD4LSA 4um/HAXC8MCrcklWPG2RxSVZCWoxfuqx6EOiTcyrkG6Rg0DR4lCvcU2ItNA9VwJ9 y5C9Nen4DVDQFes/3z9wGIVj4ANsZoe2yevU3jD3wFJoP8Edob01xKRi81YABNwu mPNDAgOvK8r7oT+bOrZeiJAu1P+ZV4ovkwtgghuX8/5LZ4IbEn3XErl6WwNNU4Mf /jUrAEnUgU/fXC6q8RmQmGYg6xQlsA5xg3mAqpc78TLRNWrNh6Dfg8uAZnVl7cmH /3w0++cQr75LtZe9aJfEVE16O8i2DbDHaG16 -----END CERTIFICATE-----Generated at Mon Mar 2 14:26:38 2026 by rpki-client